Securing Containers, First Steps in Docker and Kubernetes from DevOps and Docker Talk: Cloud Native Interviews and Tooling

DevOps and Docker Talk: Cloud Native Interviews and Tooling

Bret Fisher

Episodes

About

Reviews

Promote

Securing Containers, First Steps in Docker and Kubernetes

53 minutes Posted Sep 23, 2022 at 1:30 pm.

) Intro

) Mid-Roll Intro

) Bret's Intro

) Main show

) What should I worry about first? The Basics!

) Start with images

) Bret.show/SecurityFirst

) CVE scanning

) Dependency scanning

) Bret's Github with Dependabot

) OS dependencies with Trivy and Snyk

) Bret's Talks

) Alpine is not always good

) All hands on automation

) Don't run as root inside the image

) Question

) Making slimmer images

) Atomist

) DockerSlim

) Question

) Securing Docker

) Docker host scanner

) Falco

) Just use Docker

) Question about Windows Containers

) Maintain your servers

) Docker in the cloud

) Always stay on the latest Kubernetes release

) Kube-bench

) Tree.io

) Pod specs

) Sec comp

) Security context

) Privilege escalation

) Superlinter

) Question about Fargate

) Network policies

) Kubernetes docs article on security context

) Question

) Third-party security monitoring

) Question about volumes

) Question about Docker subnets

) Question about secrets

) Question about subnets 2

) Question

) Outro

Intro

Mid-Roll Intro

Bret's Intro

Main show

What should I worry about first? The Basics!

Start with images

Bret.show/SecurityFirst

CVE scanning

Dependency scanning

Bret's Github with Dependabot

OS dependencies with Trivy and Snyk

Bret's Talks

Alpine is not always good

All hands on automation

Don't run as root inside the image

Question

Making slimmer images

Atomist

DockerSlim

Question

Securing Docker

Docker host scanner

Falco

Just use Docker

Question about Windows Containers

Maintain your servers

Docker in the cloud

Always stay on the latest Kubernetes release

Kube-bench

Tree.io

Pod specs

Sec comp

Security context

Privilege escalation

Superlinter

Question about Fargate

Network policies

Kubernetes docs article on security context

Question

Third-party security monitoring

Question about volumes

Question about Docker subnets

Question about secrets

Question about subnets 2

Question

Outro

0:00

53:12

Download MP3

Share at current time

Show notes

Bret goes through his top recommendations for securing container images, Docker containers and Kubernetes pods.This is a tip-packed show where Bret lists much of what's documented in his courses, starting with the first steps you should take, and the bare security necessities that everyone should be doing. Then he covers more advanced security activities you should consider once the basics are covered.Streamed live on YouTube on July 7, 2022.Unedited live recording of this show on YouTube (Ep #177).★Topics★Bret's Container Security AMADocker Security DocsDocker Buys AtomistSlim.ai website: Auto-slimming imagesDocker Slim toolKubescape websiteKubernetes Security ContextSeccomp by defaultLint all files with super-linterDatree K8s file scanKubernetes BenchmarkMy GitHub Actions examples: Automate your builds, CVE scans, and moreVideo on building a more secure base imageSnyk security tools websiteTrivy CVE and K8s scansFalco for watching servers for bad behavior★Join my Community★Best coupons for my Docker and Kubernetes coursesChat with us on our Discord Server Vital DevOpsHomepage bretfisher.com

(

You can also support my free material by subscribing to my YouTube channel and my weekly newsletter at bret.news!Grab the best coupons for my Docker and Kubernetes courses.Join my cloud native DevOps community on Discord.Grab some merch at Bret's Loot BoxHomepage bretfisher.com

← See all 194 episodes of DevOps and Docker Talk: Cloud Native Interviews and Tooling